Received-SPF: pass (sog-mx-1.v43.ch3.sourceforge.com: domain of petertodd.org
	designates 62.13.148.108 as permitted sender)
	client-ip=62.13.148.108; envelope-from=pete@petertodd.org;
	helo=outmail148108.authsmtp.net; 
Date: Fri, 4 Oct 2013 07:53:00 -0400
From: Peter Todd <pete@petertodd.org>
To: Mike Hearn <mike@plan99.net>
Message-ID: <20131004115300.GA22215@savin>
References: <CANEZrP1Sd8cK2YUr4OSvnOxEJrbWpmfdpor-qbap1f98tGqPwg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
	protocol="application/pgp-signature"; boundary="n8g4imXOkfNTN/H1"
Content-Disposition: inline
In-Reply-To: <CANEZrP1Sd8cK2YUr4OSvnOxEJrbWpmfdpor-qbap1f98tGqPwg@mail.gmail.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
Cc: Bitcoin Dev <bitcoin-development@lists.sourceforge.net>
Subject: Re: [Bitcoin-development] Code review
Precedence: list


--n8g4imXOkfNTN/H1
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, Oct 04, 2013 at 12:30:07PM +0200, Mike Hearn wrote:
> Git makes it easy to fork peoples work off and create long series of
> commits that achieve some useful goal. That's great for many things.
> Unfortunately, code review is not one of those things.
>=20
> I'd like to make a small request - when submitting large, complex pieces =
of
> work for review, please either submit it as one giant squashed change, or
> be an absolute fascist about keeping commits logically clean and separate=
d.
> It really sucks to review things in sequence and then discover that some
> code you spent some time thinking about or puzzling out got
> deleted/rewritten/changed in a later commit. It also can make it harder to
> review things when later code uses new APIs or behaviour changes introduc=
ed
> in earlier commits - you have to either keep it all in your head, do lots
> of tab switching, or do a squash yourself (in which case every reviewer
> would have to manually do that).

When I'm reviewing multiple commit pull-requests and want to see every
change made, I always either click on the "Files Changed" tab on github,
which collapses every commit into a single diff, or do the equivalent
with git log.

Why doesn't that work for you?

> On a related note, github seems to have lost the plot with regards to code
> review - they are spending their time adding 3D renderers to their diff
> viewer but not making basic improvements other tools had for years.
>=20
> So, I'd like to suggest the idea of using Review Board:
>=20
> http://www.reviewboard.org/
>=20
> It's an open source, dedicated code review tool used by lots of big name
> companies for their internal work. It has git[hub] integration and a lot =
of
> very neat features, like the ability to attach screenshots to reviews. Al=
so
> more basic ones, like side by side diffs. Branches can be and often are
> submitted to the system as single reviews.
>=20
> The company behind it (disclosure - written and run by a long time friend
> of mine) offers hosting plans, but we could also host it on a Foundation
> server instead.

One advantage of using github is that they're an independent third
party; we should think carefully about the risks of furthering the
impression that Bitcoin development is a closed process by moving the
code review it to a server that we control with explicit review groups.

Given that Review Board appears to remain cryptographically unverifiable
there may also be disadvantages in operating it ourselves in that if the
review server does get compromised we *don't* have a third-party to
blame. In addition GitHub is a third-party with a very valuable
reputation to uphold and full-time staff - they're doing a better job of
keeping their servers secure and running then we ever could.

--=20
'peter'[:-1]@petertodd.org

--n8g4imXOkfNTN/H1
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAEBCAAGBQJSTqwcAAoJECSBQD2l8JH71bwH/Ap1Mkguf27+ycuDW4yLLj23
DoQrbLGYDFvBLeXVmIYZ0+goIlNQPpf+B/II+i+lQOd7RPeNz+WjQLsdMiwbKjGT
wVGXM6KuE08JxhpR0HphTVkJm5UxHc4h+Y7bprXsAYBR6PTEoc20sN53q99G0lHF
i/H/3n+AaRdnjRuYCwbI5zHSMfje4TYUflocQ9yNWF7bdYMSvGYANJGxnRk2/2F2
nB37PT89Kx+DQ3okbusmwQm1nOfzfrh1jg3St4DHYL5qc2oiGl+w0ND9HymW4YKE
VEPNP6sn8w0UMOl6T1ZFRYCDsZntKifhLl4pGLpwKN8jtiHZi+vicEH9oGqWuQs=
=ZRfu
-----END PGP SIGNATURE-----

--n8g4imXOkfNTN/H1--